« Volver al listado

CVE-2023-6724

Estado: ModificadaAlta (8.8)—

Authorization Bypass Through User-Controlled Key vulnerability in Software Engineering Consultancy Machine Equipment Limited Company Hearing Tracking System allows Authentication Abuse.

This issue affects Hearing Tracking System: before for IOS 7.0, for Android Latest release 1.0.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Simgesel — Hearing Tracking System

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-6724",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-6724",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-08T15:45:40.392651Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "iletisim@usom.gov.tr",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "iletisim@usom.gov.tr",
      "affectedData": [
        {
          "vendor": "Software Engineering Consultancy Machine Equipment Limited Company",
          "product": "Hearing Tracking System",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "for IOS 7.0, for Android Latest release 1.0",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-02-09T13:15:41.570",
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0099",
      "source": "iletisim@usom.gov.tr"
    },
    {
      "url": "https://www.usom.gov.tr/bildirim/tr-24-0099",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "iletisim@usom.gov.tr"
    },
    {
      "url": "https://www.usom.gov.tr/bildirim/tr-24-0099",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "iletisim@usom.gov.tr",
      "description": [
        {
          "lang": "en",
          "value": "CWE-639"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Authorization Bypass Through User-Controlled Key vulnerability in Software Engineering Consultancy Machine Equipment Limited Company Hearing Tracking System allows Authentication Abuse.\n\nThis issue affects Hearing Tracking System: before for IOS 7.0, for Android Latest release 1.0."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de omisión de autorización a través de clave controlada por el usuario en Software Engineering Consultancy Machine Equipment Limited Company Hearing Tracking System permite el abuso de autenticación. Este problema afecta a Hearing Tracking System: antes para IOS 7.0, para Android, la última versión 1.0."
    }
  ],
  "lastModified": "2026-06-17T06:51:18.320",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:simgesel:hearing_tracking_system:*:*:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C9083FF-ED5C-4F86-A726-7685B7695815",
              "versionEndIncluding": "1.0"
            },
            {
              "criteria": "cpe:2.3:a:simgesel:hearing_tracking_system:*:*:*:*:*:iphone_os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D7DDA3E-53DA-4DD5-924A-405923480DBB",
              "versionEndExcluding": "7.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "iletisim@usom.gov.tr"
}